Microsoft KB Archive/279978

Knowledge Base

Error Message: You Do Not Have Sufficient Access to the Active Directory

Article ID: 279978

Article Last Modified on 1/15/2006

---

APPLIES TO

• Microsoft BackOffice Server 2000

---

This article was previously published under Q279978

IMPORTANT: This article contains information about modifying the registry. Before you modify the registry, make sure to back it up and make sure that you understand how to restore the registry if a problem occurs. For information about how to back up, restore, and edit the registry, click the following article number to view the article in the Microsoft Knowledge Base:

256986 Description of the Microsoft Windows Registry

SYMPTOMS

When you install BackOffice Server 2000, you may receive the following error message on the Suite Requirements page of the Setup Wizard:

You do not have sufficient access to the Active Directory.

CAUSE

This behavior can occur when you install BackOffice Server 2000 on a Windows 2000 domain controller or on a Windows 2000 domain member that is not the schema master. The first time that BackOffice Server 2000 is installed to a domain the server has to be able to modify the Active Directory schema.

RESOLUTION

WARNING: If you use Registry Editor incorrectly, you may cause serious problems that may require you to reinstall your operating system. Microsoft cannot guarantee that you can solve problems that result from using Registry Editor incorrectly. Use Registry Editor at your own risk.

To Enable Schema Updates

The schema updates may be enabled by means of the Active Directory Schema Microsoft Management Console (MMC) or by editing the registry. However, the Schmmgmt.dll dynamic-link library file must be registered to make the Active Directory Schema snap-in available as a MMC snap-in. The following steps must be completed on the server that is the schema master.

To Register the Schmmgmt.dll File:

1. Click Start, and then click Run.
2. Type: regsvr32 schmmgmt.dll, and then click OK.
   

NOTE: RegSvr32 has been successfully registered when a DllRegisterServer in schmmgmt.dll succeeded dialog box is displayed.

To Enable Schema Updates By Using the Active Directory Schema MMC:

1. Click Start, click Run, type: mmc, and then click OK.
2. On the Console menu, click Add/Remove Snap-in.
3. Click Add.
4. Click Active Directory Schema.
5. Click Add.
6. Click Close to close the Add Standalone Snap-in dialog box.
7. Click OK to add the snap-in to the console.
8. Right-click the Active Directory Schema node, and then click Operations Master.
   

NOTE: The schema master is listed in the Current Operations Master section of the Change Schema Master dialog box.

1. Click to select the Schema may be modified on this Domain Controller check box. Click OK, and then exit the console.

To Enable Schema Updates By Editing the Registry:

It is not recommended to enable the schema updates by directly editing the registry. The schema updates should be enabled through the MMC whenever possible.

NOTE: The registry edit should be performed on the server that has the schema master role.

To directly edit this registry key:

1. Start Registry Editor (Regedt32.exe).
2. Locate the Schema Update Allowed value under the following key in the registry:

   HKEY_LOCAL_MACHINE\System\CurrentControlSet\Services\Ntds\Parameters

3. Double-click the Schema Update Allowed value, type: 1 in the "Data:" field, and then click OK.
4. Quit Registry Editor.

MORE INFORMATION

If you click to select the Schema may be modified on this Domain Controller check box in the console, the Schema Update Allowed registry value is added if it is not present.

If you click to clear the Schema may be modified on this Domain Controller check box, the Schema Update Allowed registry value is set to zero (0), but the option does not delete the value.

Further information about the Active Directory Schema can be found in Chapter 4 of the Windows 2000 Server Distributed Systems Guide, which is part of the Windows 2000 Server Resource Kit.

REFERENCES

For additional information, click the article numbers below to view the articles in the Microsoft Knowledge Base:

285172 Schema Update Require Write Access to Schema in Active Directory

255690 How to View and Transfer FSMO Roles in the Graphical User Interface

Additional query words: smallbiz SBS register schmmgmt dll regsvr32

Keywords: kberrmsg kbenv kbprb KB279978

---

Send feedback to Microsoft

© Microsoft Corporation. All rights reserved.